Skip to main content

Recently active topics

136
DLippold
DLippoldVisitor
 General Discussions
User-Initiated Enrollment - LDAP/Managed AppleIDs necessary?

Hello, So I’m curious about whether we need to have either an LDAP server setup or issue managed AppleIDs in order to utilize user-initiated enrollment.I made a user and user group in JAMF Pro thinking it would allow for enrolling a device and that I could give my end users a single set of credentials to then get the MDM profile and configuration to everyone. However during the enrollment, I get stuck on a page which mentions “Assign to User” with a blue magnifying glass and Enroll button which don’t seem to react, no matter what I enter. Perhaps this is not possible, but it’s what I’m hoping to find out here. Can I use a single JAMF Pro user to log in all my end users for user-initiated device enrollment? Or must we set up an LDAP server/get managed IDs?Context: We are doing a big push for new devices soon, and currently we have no self-enrollment, meaning our IT department would have to manually enroll every phone. We are looking for an alternative solution to avoid that.All devices

30
DLippold
JeniA
JeniACommunity Manager
 Tech Thoughts
Jamf Nation Upgrade: What you Need to KnowBlog

Last month, we announced through this Tech Thoughts blog article that Jamf Nation will get an upgrade later this summer. Well, friends...the time has come! On Friday, July 4, Jamf Nation shifted from its current platform to a new space, and we couldn't be more excited.  What you need to know about the migration  Any new content published on Jamf Nation between JUNE 23 – JULY 3 will need to be re-posted to the new site after launch. (If you got your answer in that timeframe and don’t care that it’s on the new site, that’s fine too!)   All content that was posted to Jamf Nation BEFORE JUNE 23 will migrate. No action needed!    Yes, your profile information will migrate.   Yes, your User Group information will migrate.    Yes, your postings to the job board will migrate.  It will ALL migrate. 😊    Improvements in the new space   We’re excited for you to come in and see the new space soon! Warning...it will look and feel different, this is by design. This upgraded version of Jamf Nation w

60
JeniA
BCPeteo
BCPeteoContributor
 General Discussions
What happens on macOS when you update a configuration profile

We need to add a new allowance to our VPN profile that is required for the newest version of our VPN client .I am trying to figure out what exactly happens on macOS when a profile gets updated. Does it remove all the settings the profile sets and reapply, or does it only add/remove changes. I would like it so people do not get kicked off VPN when the profile is updated (The addition to the profile only deals with login items.  

192
sdagley
jordy_witteman
jordy_wittemanContributor
 Tech Thoughts
WWDC25 Recap: In-Person Experience and Key Announcements for IT adminsBlog

Monday June 9 it was that time of the year, Apple’s World Wide Developers Conference kicked off with the usual Keynote where they introduce the new versions of macOS, iOS, iPadOS, visionOS, tvOS and watchOS. I was lucky enough to have obtained a ‘golden ticket’ through the lottery system and actually attend this event at Apple Park in Cupertino! As an Apple consultant and macOS developer at long-time Jamf-partner Root3, it was both very exciting and relevant for me to attend. I’d like to share my in-person experience while also highlighting key announcements, especially for Apple IT admins and how this may affect us this fall.  In-person experienceThe WWDC event for attendees is actually a multi-day event with most activities taking place from Sunday to Tuesday. It starts with a welcome reception at the historic Apple Campus at 1 Infinite Loop where you check-in, get your badge, happy Apple employees high-fiving and lots of photo opportunities. It’s a great start of the week to mingle

21
JoannaB
D
DonMEmployee
 Milwaukee Apple Admins
July 23, 2025: Coffee Roundtable

​Whether you manage a few Macs or thousands of iOS devices, connect with other Apple administrators in a relaxed and collaborative environment.​No presentations or sales pitches—just excellent company, coffee, and engaging conversations with individuals who comprehend the unique advantages and challenges of managing Apple devices in the enterprise.RSVP at this link or simply drop in — we will be here! Time 8:30 am - 11:30 am CSTLocation Fiddleheads Coffee WauwatosaAddress 8807 W North Ave, Wauwatosa, WI 53226​Sponsored by Jamf — Connecting the Apple admin community, one coffee at a time.

70
D
D
DonMEmployee
 Milwaukee Apple Admins
July 8, 2025 Coffee & Connect

Informal Coffee & Connect Meetup! Whether you manage a few Macs or thousands of iOS devices, connect with other Apple administrators in a relaxed and collaborative environment. Attend at your convenience and stay as long as you wish. No presentations or sales pitches—just excellent company, coffee, and engaging conversations with individuals who comprehend the unique advantages and challenges of managing Apple devices in the enterprise. RSVP or simply drop in — we will be present.  ​Sponsored by Jamf — Connecting the Apple admin community, one coffee at a time.

161
D
JeniA
JeniACommunity Manager
 Jamf Announcements
Content posted from June 23 - July 3 did not migrate

Things are a little different around here! As we shared in this Tech Thoughts article, any posts that were created in that space between JUNE 23 - JULY 3 DID NOT MIGRATE. Instead of putting Jamf Nation into read-only mode during our transition to this new site, we opted to keep it open so y’all could keep getting help from the community. If you posted during that timeframe and didn’t get your answer, go ahead and re-post it on the forum now!  If you posted during that timeframe but already got your answer (or don’t need it), no need to do anything else. That’s all! I hope you’re enjoying this revamped version of Jamf Nation. Be sure to reach out to us at jamfnation@jamf.com with any questions or feedback! 

60
JeniA
PCalomeni
PCalomeniCommunity Manager
 Release Announcements
Jamf Connect 3.1.0 Now Available

Today we released Jamf Connect 3.1.0; this release addresses the following product issues:[PI131938] Fixed: For configurations using Microsoft Entra ID as their identity provider, the Jamf Connect login window displays an error message at the bottom of the screen when passkeys are an available authentication method. [PI134695] Fixed: The Jamf Connect login window displays a black screen after a user enters their password incorrectly and triggers the maxFailedAttempts setting. [PI135947] Fixed: When Short Name (OIDCShortName) is set to an email, the Jamf Connect login window creates a user account with the entire email domain instead of the prefix before the "@" symbol. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

180
PCalomeni
kwoodard
kwoodardValued Contributor
 General Discussions
Docutil question.

I have been using docutil for many years at this point (along with BuildADock). It works great. I am building a new lab and it's a weird setup. Not every computer will have the same versions of software installed (mainly Adobe) for some stupid licensing issues. I'm wondering if there is a way to use wildcards in the docutil script? For example, I have three sets of computers that have either Adobe CC 2023, 2024, or 2025. The software installs are the same, but the version year is different. Rather than make different docks for all the variations in the lab, is there a way to use a wildcard so it puts whichever version of Photoshop onto the dock that is installed onto the computer?

118
kwoodard
LaszloTarnai
LaszloTarnaiNew Contributor
 General Discussions
Packaging Maya 2025

Hi,I would like to create a deployment for Maya 2025 based on the topic for 2024:https://community.jamf.com/t5/jamf-pro/packaging-autodesk-maya-2024-with-redundant-license-servers/m-p/298743I've found a .app installer in the Contents of the installer:/tmp/maya2025/AdskIdentityManager/AdskIdentityManager-Installer.app This app opens an installation wizard. How can I execute this (after the PKG installs) in silent mode?Thank you.

2423
kwoodard
PCalomeni
PCalomeniCommunity Manager
 Release Announcements
Jamf Pro 11.18.1 Now Available

Today we are releasing a maintenance version of Jamf Pro; highlights include:Changes and ImprovementsJamf has upgraded the Jamf Support ticketing system. To access the new Support portal, log in to Jamf Account and click Contact Support in the top navigation. Jamf Pro no longer returns a "Version entered is unknown" error when attempting to execute an advanced computer search or save a smart computer group that uses 'unknown version' as a value for existing patch reporting criteria. Resolved IssuesJamf Pro Server: Security IssueJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI136944] Jamf Pro 11.18.1 includes Tomcat 10.1.42, effectively resolving a known security vulnerability in a third-party library (CVE-2025-48976). For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the

1302
PCalomeni
kwoodard
kwoodardValued Contributor
 General Discussions
Autodesk 2026 Deployment script

Hey folks, I worked on a script to deploy Autodesk 2026 (the one that uses the named user licenses). We don’t teach Mudbox, so that isn’t in the script...but Maya and AutoCAD is (along with Darwin..what a PIA to get working). I packaged the apps and deployed to /private/tmp/AutodeskApps… I have a lot of logging left in the script as Darwin is a royal pain and can fail at many different steps. I also made use of a lot of variables to hopefully make updating in the future easier. Oh, also did it in zsh.Hope you all find it useful, or at the very least, a good jumping off point!#!/bin/zshset -euo pipefail############################# VARIABLES############################YEAR="2026"TMP="/private/tmp"APP_TMP="${TMP}/AutodeskApps"LOG="/var/log/autodesk2026_install.log"DMG_LIST=( "Autodesk_Maya_2026_1_Update_ML_macOS.dmg" "Darwin.dmg" "AdskIdentityManager-UCT-Installer.dmg" "Autodesk_AutoCAD_2026_macOS.dmg")PKG_FILE="AdskLicensing-15.4.0.13093-mac-installer.pkg"INSTALL_SUMMARY=()log() {

10
kwoodard
stutz
stutzContributor
 General Discussions
Self Service+ Issues (Keychain and Onboarding)

Anyone having a keychain issue and the onboarding window not opening automatically upon first login (newly imaged machine that hasn’t been logged into before)?  Tried 3 times and get the same result.Self Service+ Version: 2.4.0Jamf Connect Version: 3.4.1Jamf Connect Preference Domain Version: 3.2.0macOS Version: 15.5 (24F74)  

40
stutz
dreynolds1118
dreynolds1118New Contributor
 General Discussions
Sophos [HIGH] Alert for Sophos Central

Does anyone receive these emails, [HIGH] Alert for Sophos Central, when their computer is updated from one operating system to another, or at other random times? I was informed by Sophos that I would need to manage using static groups instead of smart groups, but that seems inefficient and not ideal.

193
brandonharshe
SSLC
SSLCVisitor
 General Discussions
ZTNA network routing not actively used

Hi,I’m trying to use Network Access in Jamf Cloud to route traffic to M365 apps via the ZTNA network for IOS devices. I’ve added this as a separate Activation Profile on top of the Default Profile that covers different services. The users already had the Jamf Trust app on their phones for the previously enabled services. Those services didn’t require a login, since Jamf Pro is distributing Jamf Trust. With the additional profile I assumed that logging in was somehow made possible in the App, but there’s no option anywhere. Also, I don’t see that traffic is routed through the ZTNA network either (since I would expect traffic to come from a different IP). Last, if I look in device management in Jamf Cloud, the Network Access services is not active for the devices, so I wonder if the Activation Profile is even deployed, despite I’ve done that (I even tried to open the link on a phone manually).Any suggestions on what I might be missing or doing wrong? The documentation isn’t really giving

80
SSLC
rfakes12
rfakes12New Contributor
 General Discussions
Jamf School and strong certificate mapping with AD

Hi everyone,We’re currently using Jamf School to manage our Apple devices and are running into issues with Microsoft’s enforcement of strong certificate mapping as outlined in KB5014754.Our environment relies on certificate-based authentication with Active Directory. While we’ve configured UPN mapping using the RFC 822 SAN field, our domain controllers (now in Full Enforcement mode) are rejecting certificates that don’t meet the new strong mapping requirements.Unfortunately, Jamf School doesn’t appear to support:Inclusion of SAN URIs with SID Custom certificate templates Scripting or automation for explicit mapping via altSecurityIdentitiesWe’ve temporarily enabled Compatibility Mode on our domain controllers, but this is only viable until 10 September 2025, when Microsoft will enforce Full Enforcement by default.Questions for the community and Jamf staff:Are there any confirmed plans for Jamf School to support strong certificate mapping before the enforcement deadline? Has anyone foun

223
mvu
vshulhin
vshulhinNew Contributor
 General Discussions
Jamf Remote Assist

Hello Jamf Community, I'm currently experiencing an issue with Jamf Remote Assist — I haven't been able to successfully connect to any Mac devices for the past two weeks. Each attempt either times out or fails with no clear error message. I've tried the following so far: Confirmed that Remote Assist is enabled in Settings. Restarted Jamf Daemon and the local Jamf app on the affected Mac. Verified network/firewall configurations (no changes recently). Tested on both Intel and Apple Silicon Macs with the same result. Has anyone else encountered similar issues recently?Is there any known workaround or reliable fix that could help restore functionality? Any suggestions or guidance would be much appreciated. Thanks in advance!

858
mvu
user-BqBTAgwquG
user-BqBTAgwquGContributor
 General Discussions
Platform SSO with MS Entra ID Advice

We’ve been testing Platform SSO with Microsoft Entra ID in a Password Authentication configuration, and found that we need to create a local account on the system first in System Settings > Users & Groups, before a user can log in with user@domain.com as their username, is that expected behavior? If that is what is required then we can work with that, but ideally once the system has the relevant configuration profiles installed I’d like anyone in Entra ID to be able to log in without any manual configuration. If I don’t manually create a local, standard account with the same username beforehand, the user just gets a dialogue box containing a yellow warning triangle with no other information and is then automatically logged out again. Or would I be better off with a Secure Enclave configuration? We have hundreds of staff 1:1 Macs (mostly MacBooks) and about 100 lab iMacs/Mac Studios. We are a big MS/Azure/Entra house, currently bind to AD (which we are desperate to come away from

725
mvu
BookMac
BookMacJamf Heroes
 General Discussions
Jamf Nation Forum

Hello jamf nation, If the goal of the new Jamf Nation Rewards program is to generate more content, user numbers and traffic, then it would be cool if jamf also considered redesigning the forum page. There are no specific topic areas. I can only search or scroll down. If I have then scrolled down so far that I have to click on "load more", then open a post and click back again, I am back at the top of the homepage and have to go back to the bottom and click on "load more". The only way to avoid this is to open a post in a new tab. Are there any thoughts on this?l @Mitchell_Gordon  Cheers

919
Mitchell_Gordon
dlondon
dlondonHonored Contributor
 General Discussions
Restricting Office Macros

Hi,We are working on implementing Managed Blocking of Macros in Office365.  My task was to to have every user (not computer) have the Macro Security locked to "Disable all macros without notification" There was also to be an exclusion group for users who would not be controlled by the above lock.  For the exclusion group, we wanted if possible for them to be locked instead to "Disable all macros with notification" as that setting allows a user to enable macros on a document by document useI also had to make this work with Entra or our On Premises Active Directory (to which the Mac's are bound).  As there's no linkage yet with Entra I've focused on Active Directory (AD)I found that the settings for this in the Configuration Profile only work on a "Computer Level" even though they seem to be User settingsMy Configuration Profile looks like this:This works but generally takes a few minutes for the machine to pick up a change in the group from ADIf I try and make a second Config Profile an

342
sdagley
bowie
bowieNew Contributor
 General Discussions
USB device audit

is there any way to create an extension attribute that will contain audit of usb devices (storage) connected e.g. in the last month?

365
bowie
T
tahirContributor
 General Discussions
Option Error at SCEP Payload

We have been using this profile to automatically connect to the corporate SSID. However, two days ago, I encountered an issue when I attempted to re-push the profile to a device—it failed to install.   Upon investigating the profile, I noticed an "Options" error that appears when the SCEP payload is selected. However, no specific errors are shown in the payload settings themselves. I tried to create a new profile but still error is there   Could you please assist in identifying and resolving the issue?    

4011
Rajnish Choudhary
user-NPkpbEEENB
user-NPkpbEEENBVisitor
 Jamf Education User Group
Jamf Nation Live Tokyoのご案内

皆様こんにちは！もう既に毎日暑いですが、お身体大丈夫でしょうか？熱中症対策などでお身体に負担がかからない様、ご自愛ください！まだ７月上旬ですが、まだこれからも暑くなりそうな気配ですね。そんな中で更に熱いJamf Nation Liveを今年も開催する事になりました！🔥日程：8月8日（金）時間 : 10:00-19:30　予定*（9:00- 受付開始 | 18:00- 懇親会）基調講演は13:00開始予定です。午前の​部は、​技術セッションや​個別相談会を​予定しています。https://www.jamf.com/ja/lp/jamf-nation-live-tokyo-2025/?utm_source=sbi&utm_medium=referral&utm_campaign=ap_event_jamf-nation-live_jnl-tokyo_banner&utm_content=20250519 今年も最新情報やご利用者の方のスピーカーセッションも満載です。そして、EducationはUser Groupの中から、3名の先生方がご登壇いただきます！Jamfの有効な使い方、Jamfにして良かった事など、色々なHintを得られる1日です。ご来場には事前登録（無料）が必要です。上記のリンクから、もしくは下記のQRコードを読み取ってご登録ください。当日のセッションは間もなく公表予定です。 ご不明な点ございましたらお問い合わせ下さい。皆様にお会いできる事を楽しみにしています！

50
user-NPkpbEEENB
shrisivakumaran
shrisivakumaranJamf Heroes
 General Discussions
Okta LDAP attribute changed for City

Does anyone noticed LDAP attributes for Okta is changed from city to l or o?From today morning, I saw this changes on my environment. With city key word, its not pulled data from Okta to Jamf.

20
shrisivakumaran
AJPinto
AJPintoLegendary Contributor
 General Discussions
Is Jamf Nation still a technical community hub?

Did the mission of Jamf Nation change with the recent update? The recent activity feed is full of volunteer stuff, did I miss a memo somewhere?

791
Mitchell_Gordon

Have an Idea?

Submit and vote on product ideas.

Submit Feature Request
Terms & ConditionsCookie settings